China Express
v3.0.0中国快递查询与物流信息解析。Use when the user wants to directly get a Chinese package status. Force browser automation on https://www.kuaidi100.com/ and read the live resu...
⭐ 0· 141·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the runtime instructions. The skill exclusively targets real-time scraping of https://www.kuaidi100.com/ via browser automation; it does not request unrelated binaries, credentials, or config paths. Requiring browser automation is proportionate to the stated goal of reading live web results.
Instruction Scope
SKILL.md gives detailed, narrowly scoped instructions: extract candidate tracking numbers from user input, open the kuaidi100 page, enter the number, confirm the displayed number matches, extract company, latest status and 1–3 recent events, and refuse to fabricate results if blocked. It does not instruct reading arbitrary local files, exfiltration to other endpoints, or use of unrelated sites. It does note possible phone-last-4/verification challenges and instructs to ask the user or report inability when needed.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is downloaded or written to disk by the skill itself, minimizing installation risk.
Credentials
No environment variables, secrets, or extra credentials are requested. The only implicit requirement is an execution environment that supports browser automation (e.g., a headful or headless browser), which aligns with the stated behavior. The skill may request user-supplied verification material (e.g., phone-last-4) when the site requires it — this is proportional but users should be cautious about sharing full phone numbers or sensitive data.
Persistence & Privilege
always is false and the skill has no install-time persistence. disable-model-invocation is default (false), meaning the agent can invoke the skill autonomously; this is the platform default and not, by itself, a red flag here because the skill has no extra privileges or credential access.
Assessment
This skill appears coherent and limited to automating https://www.kuaidi100.com/ to read live tracking results. Before installing: ensure your OpenClaw runtime supports browser automation (the skill will fail otherwise); do not supply full phone numbers or other sensitive personal data unless you are comfortable doing so (the site may request the last 4 digits or OTP to show results); expect the skill to report when a CAPTCHA or verification blocks automated querying rather than to bypass it; and remember results should be verified (the skill reads the page as-is and will return 'no result' rather than guess). If you need offline or alternative sources, this skill will not fall back to them.Like a lobster shell, security has layers — review code before you run it.
latestvk97562qec7j92dq7wck9mab3gd838q2k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📦 Clawdis